Session/Cookie alone does not secure your web application – CSRF

Guess what will happen if you add an image like below in your html page: <img src=”http://mail.google.com/mail/?logout&hl=en”  /> It does not appear in page, but your google account in another window or another tab will get logoff. Now an external website could logout you from your gmail or orkut. IF you coded your website to [...]

0 Comments , , , , , , , , , ,

Cross Browser Cookies

A normal html / web developer must be femilered with cookies and sessions. In normal case the cookie set by one browser cannot be access through another browser. Each browsers have its own space to store the cookie value. Thats why when you login your email account from one browser, if you go another browser [...]

2 Comments , , ,